CVE-2017-15278: Teampass

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Affected products

• Teampass Teampass: up to and including 2.1.27.8

Published 2017-10-12. Last modified 2026-06-17.